ux-scenarios
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The Figma integration docs instruct the agent at runtime to load external MCP resources and plugin endpoints (e.g. "skill://figma//SKILL.md" and "figma.com/design/:fileKey/..."), which are used to read remote skill documentation and to invoke Figma MCP tools that run JS against the Plugin API, so external content can directly influence agent behavior and execute code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata